Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/awlHulwvvdQdtc1NH8SuFPcKf6E.roa
File:                     awlHulwvvdQdtc1NH8SuFPcKf6E.roa (raw, json)
Hash identifier:          bMp4Wehg0zYz9x4DlmlSUeT4SuXO0opdTuMoAYZwWxE=
Subject key identifier:   6B:09:47:BA:5C:2F:BD:D4:1D:B5:CD:4D:1F:C4:AE:14:F7:0A:7F:A1
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       A2
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/awlHulwvvdQdtc1NH8SuFPcKf6E.roa
Signing time:             Tue 31 Mar 2026 08:37:12 +0000
ROA not before:           Tue 31 Mar 2026 08:37:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        203.135.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6B0947BA5C2FBDD41DB5CD4D1FC4AE14F70A7FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:d2:46:4e:45:c6:fa:3b:30:d9:97:dc:42:
                    c8:4a:f0:26:05:07:23:cc:c7:03:3c:c2:92:70:71:
                    99:63:f6:b9:62:8b:b0:40:5e:7f:ad:bd:21:86:f5:
                    ac:9d:b2:07:ae:f3:b6:24:ba:ea:ba:59:7e:46:25:
                    05:d7:34:4b:7c:23:39:60:19:e6:2b:a0:d4:c2:ec:
                    0e:d9:72:f0:e5:81:e3:66:e6:88:ef:ab:41:76:9d:
                    e8:dd:f5:12:e3:00:c0:19:12:56:5c:f3:b8:ae:2e:
                    1e:15:22:9e:eb:25:ef:aa:48:53:e5:3a:b5:dc:d3:
                    07:aa:41:f9:55:72:27:67:95:71:48:d6:a8:45:81:
                    cb:9c:d7:ba:b7:85:dd:eb:c7:47:62:2f:83:ac:25:
                    91:77:79:9d:e4:ff:b7:35:52:d8:59:99:5b:46:0b:
                    89:fc:43:94:70:ff:16:bd:a8:c6:57:d5:8a:08:32:
                    db:aa:c0:11:9c:5b:3d:2b:2b:4f:42:15:7c:07:0b:
                    bc:55:bc:46:f6:a2:94:28:f6:e0:b8:42:f7:db:af:
                    e7:41:92:29:d1:3d:94:b2:37:3b:07:96:79:7b:65:
                    bb:1b:6b:51:40:4f:21:5a:49:01:26:a1:6c:d2:1b:
                    af:38:d2:5e:17:39:b2:23:61:2c:a0:fd:0c:59:7c:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:09:47:BA:5C:2F:BD:D4:1D:B5:CD:4D:1F:C4:AE:14:F7:0A:7F:A1
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/awlHulwvvdQdtc1NH8SuFPcKf6E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:1a:21:08:9e:67:ab:b2:2b:82:f7:14:b2:2d:1a:b1:e0:
         2c:08:d9:05:70:ee:26:46:ca:e1:fe:12:0b:f3:3f:dc:c6:36:
         7f:8e:9e:a1:0e:f5:5a:0e:16:c7:c6:b3:8f:1a:96:98:6a:4d:
         cb:94:79:9f:58:aa:89:df:03:79:af:a4:06:69:9c:4b:45:b8:
         f7:44:64:8d:dd:32:94:19:e9:bc:c8:43:ea:40:89:b5:8c:c6:
         74:09:1d:e7:e4:ba:4a:b6:61:1c:ef:a3:49:57:7e:1a:14:2b:
         78:0b:8f:3f:20:45:8d:b3:f8:d5:0f:4e:1b:6d:8a:b0:b4:e5:
         e6:be:c0:8c:e6:01:97:e6:74:4f:39:79:86:9f:3f:ad:fa:df:
         75:8f:89:da:aa:58:dc:29:8f:ad:99:96:c0:65:11:b2:b1:93:
         27:4f:74:cf:87:bb:5d:f8:b3:05:68:f4:12:4d:3a:29:53:23:
         7d:e9:87:95:5e:f7:58:af:c4:8f:09:9d:aa:d5:8f:45:35:02:
         1d:45:89:f1:98:bd:fa:44:5a:7c:0f:be:d6:25:46:ef:5c:f1:
         3c:0c:f0:a8:37:c5:82:4b:18:63:4e:6a:f1:78:5a:f3:7d:72:
         8f:ba:f7:5a:e9:ff:8b:7f:91:b9:c4:60:97:7c:62:bc:2e:19:
         6f:62:78:fe
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1
RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw
ODM3MTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCMDk0N0JBNUMyRkJE
RDQxREI1Q0Q0RDFGQzRBRTE0RjcwQTdGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6odJGTkXG+jsw2ZfcQshK8CYFByPMxwM8wpJwcZlj9rlii7BA
Xn+tvSGG9aydsgeu87Ykuuq6WX5GJQXXNEt8IzlgGeYroNTC7A7ZcvDlgeNm5ojv
q0F2nejd9RLjAMAZElZc87iuLh4VIp7rJe+qSFPlOrXc0weqQflVcidnlXFI1qhF
gcuc17q3hd3rx0diL4OsJZF3eZ3k/7c1UthZmVtGC4n8Q5Rw/xa9qMZX1YoIMtuq
wBGcWz0rK09CFXwHC7xVvEb2opQo9uC4Qvfbr+dBkinRPZSyNzsHlnl7Zbsba1FA
TyFaSQEmoWzSG6840l4XObIjYSyg/QxZfGYvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUawlHulwvvdQdtc1NH8SuFPcKf6EwHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i
wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3
WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ5L2F3bEh1bHd2dmRRZHRjMU5IOFN1RlBjS2Y2RS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbLh8AwDQYJKoZIhvcNAQELBQADggEB
AK20GiEInmersiuC9xSyLRqx4CwI2QVw7iZGyuH+EgvzP9zGNn+OnqEO9VoOFsfG
s48alphqTcuUeZ9YqonfA3mvpAZpnEtFuPdEZI3dMpQZ6bzIQ+pAibWMxnQJHefk
ukq2YRzvo0lXfhoUK3gLjz8gRY2z+NUPThttirC05ea+wIzmAZfmdE85eYafP636
33WPidqqWNwpj62ZlsBlEbKxkydPdM+Hu134swVo9BJNOilTI33ph5Ve91ivxI8J
narVj0U1Ah1FifGYvfpEWnwPvtYlRu9c8TwM8Kg3xYJLGGNOavF4WvN9co+691rp
/4t/kbnEYJd8YrwuGW9ieP4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:13 2026 by rpki-client